IPv6 not working on Firewalla Gold Router Mode - Asus works
So, I finally received my FWG, and now it's working as my main router. My previous Asus RT-AX86U is now set as AP and connected to LAN 2 of FWG. FWG is connected to an ONT which provides a PPPoE wan connection. Everything is working fine, ipv4 connection is ok, all my devices are monitored etc etc... EXCEPT, the IPv6.
My ISP provided me with a dual stack connection and it seems like FWG can't handle it correctly. It has to be setup as DHCPv6 with prefix delegation /56. So I enabled Ipv6 in wan connection, set prefix at 56, saved (and rebooted) but i can only see a local ipv6 with no gateway. It's of course unuseful to set ipv6 on the lan interface as long as i'm not able to retrieve the correct ipv6 from my provider along with the gateway. I tried also changing the prefix (60, 64) but nothing changes. There are 2 points that makes me going mad:
1) yesterday, while i was trying all the possible combination, i've been able for a while to retrieve the correct ipv6 and gateway. After a couple of seconds they were gone again
2) in order to exclude ISP problems, i just tried to reconfigure my Asus as main router and...SURPRISE! Ipv6 works perfectly with no issue at all and with a very simple configuration (see the attached image). Using the Asus i was able to pass the ipv6 check (ipv6-test.com)
thus, what's the problem with handling IPV6 in FWG? There are no more option I can play with, given the fact that my isp does not provide a static ipv6, so i just can use dhcpv6...
Guys help me, i don't wanna give up on ipv6 nor i want to use the asus as a router losing all the fwg capabilities which i personally love...
For reference: Asus ipv6 configuration screen
-
Just to update you and everyone may occur in the same problem. It looks like my ISP don't send proper information about wan ip and gateway (for me it sounds strange because the Asus is able to retrieve all the information correctly without touching anything). Firewalla support anyway managed to get ipv6 working on FWG, so I'm satisfied with firewalla support. Thank you guys
-
Yes, my current provider is using PPPoE. Looks like for this kind of protocol RA is not provided, as long as should be the local host (sorry, i don't know exactly this kind of topic). Now for me it's ok, but would be great if in a future update Firewalla fix this. I write "fix" because other router (i.e. Asus) can manage ipv6 via PPPoE without any problem
-
I just want to say thank you to Firewalla support. This weekend my ISP had some serious problem, resulting in loss of ipv6 configuration on my FWG. I reopened the ticket and just after a couple of hours i'm back with ipv6. So far, Firewalla customer support is one of the best I've ever tried. @Support
-
@Chris Thomas - I'm not sure if you're still subscribed to this post, but if you are, can I please ask how you are delegating the /62 prefix to your downstream router?
I get a /56 from my ISP and would really like to delegate a /60 prefix to a downstream router, but I've not yet been able to work out how to do this with my FWG. I can delegate it fine from my OpenWrt router, but I'd rather use my FWG as my router. Thanks!
-
@Dean, it looks like I just have all of the IPv6 options enabled on the inside interface. That remote segment of my network (it was 10 mile point to point wireless link) isn't online at the moment as I'm preparing to move, so I can't validate my claim at the moment. I def had a /62 config on my pfsense box, might not have actually been a /62 on firewalla. But the downstream router was assigning ipv6 addresses to clients on the lan interface. (I think he is running a Cradle Point, or USG)
Is your downstream router only able to pull a single /64 for its interior interface?
-
Hi @Chris. Thank you for coming back - much appreciated.
Yes, my downstream router would only see the /64 from my FWG. I have an odd-ball downstream router that will only work if it receives a prefix delegation.
Support have said that the FWG doesn't yet support prefix delegation, but I wondered if you'd managed to get it to work somehow.
Thanks for replying though. Your network sounds really interesting - a 10 mile wireless network!
Please sign in to leave a comment.
Comments
9 comments